[Guide]Modifying client.

[mark213]

can u help me this?? i cant download the version 30.. because it always says "DOWNLOAD ERROR" in "TASKS.DATA".. hope u can help me..

[2moons]

Zoom Hack :
Credits,akson
open Olly
Search for sequence of commands
fadd dword ptr [esi+40]
fst dword ptr [esi+40]

004056BE . D985 CD000000 fld dword ptr [ebp+CD]
004056C4 . D846 40 fadd dword ptr [esi+40]
004056C7 . D956 40 fst dword ptr [esi+40]
004056CA . D81D FCAB8400 fcomp dword ptr [84ABFC] may be XXXXXX
004056D0 . DFE0 fstsw ax
004056D2 . 25 00410000 and eax, 4100
004056D7 . EB 03 jnz short 004056DC <---jnz change to jmp
004056D9 . 894E 40 mov dword ptr [esi+40], ecx
004056DC > 8B07 mov eax, dword ptr [edi]
004056DE . 3BC3 cmp eax, ebx
004056E0 . 0F85 E8000000 jnz 004057CE




can someone explain it better?

its a "lil" confusing...

[xovaine]

so just to make things clear for me, i could use this 'bot' for dual log in, right?!

[haf4]

this thread for BOT or......

I dont understand

[zevorc]

this is not a bot,its a guide on making a modded client.
if you dont know how,there are ready made ones here,

[kemkem]

Originally Posted by 2moons

Zoom Hack :
Credits,akson
open Olly
Search for sequence of commands
fadd dword ptr [esi+40]
fst dword ptr [esi+40]

004056BE . D985 CD000000 fld dword ptr [ebp+CD]
004056C4 . D846 40 fadd dword ptr [esi+40]
004056C7 . D956 40 fst dword ptr [esi+40]
004056CA . D81D FCAB8400 fcomp dword ptr [84ABFC] may be XXXXXX
004056D0 . DFE0 fstsw ax
004056D2 . 25 00410000 and eax, 4100
004056D7 . EB 03 jnz short 004056DC <---jnz change to jmp
004056D9 . 894E 40 mov dword ptr [esi+40], ecx
004056DC > 8B07 mov eax, dword ptr [edi]
004056DE . 3BC3 cmp eax, ebx
004056E0 . 0F85 E8000000 jnz 004057CE




can someone explain it better?

its a "lil" confusing...

....

[Yuureka]

errrr....

what was that quote...
already like that n still confusing ....

make ma also can't say a thing...
.....
better read clearly from the top...
that's already too detail .....

but, until debug register to find npc id
need lil guide n tips to do it >.<

can anyone explain more better n detail >.<
how to find the NPC ID >.<

[ravendarkwing]

im a bit confused in how the client can display its mob npc id's. that is the only thing that keeps me from botting using the mem-bot, any more detailed instructions? i semm to not understand how to do this:

Debug Registers
NPC ID, credits to ericjohn
this will enable the npc id
Searching for address that toggle mp bar:
search for 1 in 1 byte and untoggle it and search for 0 until it minimize your search after you found it

Finding Debug Register :
Using hex calculator,
address of toggle mp - 0x3B (NPC:ID)
- 0x2E(Misc)
- 0x2D(Coords)
- 0x2C(Dist)
Eg. 57F834EA -3B = 57F834AF

you can also debug the client to automate this
search for command:
address is = toggle mp adress
MOV BYTE PTR DS:[adress+2081],1 and change it to
MOV BYTE PTR DS:[npcid toggle adress],1

and also change this:
MOV BYTE PTR DS:[adress+2081],0 and change it to
MOV BYTE PTR DS:[npcid toggle address],0

[yolak19]

hmmm when already find the address using cheat engine.. they are 3 address comming out. and go to Ollybdg and find those address then what should be nop?

i already fill with nops thos JE / JNZ / JLE..
but still nothing happens in mounted pet jump.

i used cheat engine it works just need to unfroze again to get on normal.

[symbiotic88]

sorry but i didnt understand the guide...
could smbdy make only zoom+multiclient for me...
Thanks!

P.S. I didnt get this steps
"In the CPU window
Double click JNZ SHORT 00XXXXXX will show a Assemble box(#pic4)
change JNZ to JMP -> press Assemble button & close the box"
How I find JNZ SHORT 00XXXXXX... there are to many of them?

fadd dword ptr [esi+40]
fst dword ptr [esi+40]

004056BE . D985 CD000000 fld dword ptr [ebp+CD]
004056C4 . D846 40 fadd dword ptr [esi+40]
004056C7 . D956 40 fst dword ptr [esi+40]
004056CA . D81D FCAB8400 fcomp dword ptr [84ABFC] may be XXXXXX
004056D0 . DFE0 fstsw ax
004056D2 . 25 00410000 and eax, 4100
004056D7 . EB 03 jnz short 004056DC <---jnz change to jmp
004056D9 . 894E 40 mov dword ptr [esi+40], ecx
004056DC > 8B07 mov eax, dword ptr [edi]
004056DE . 3BC3 cmp eax, ebx
004056E0 . 0F85 E8000000 jnz 004057CE

What should I do whith these many lines, after searching it shows two lines and what's next?

[Misun]

0055EAD1 |. 8B86 2C060000 MOV EAX,DWORD PTR DS:[ESI+62C]
0055EAD7 |. 8BD1 MOV EDX,ECX
0055EAD9 |. C64424 2C 01 MOV BYTE PTR SS:[ESP+2C],1
0055EADE |. C1E2 05 SHL EDX,5
0055EAE1 |. 03D1 ADD EDX,ECX
0055EAE3 |. 894424 10 MOV DWORD PTR SS:[ESP+10],EAX
0055EAE7 |. 8D2C90 LEA EBP,DWORD PTR DS:[EAX+EDX*4]
0055EAEA |. 3BC5 CMP EAX,EBP
0055EAEC |. 0F84 90000000 JE elementc.0055EB82
0055EAF2 |. 8B8E 30060000 MOV ECX,DWORD PTR DS:[ESI+630]
0055EAF8 |. 8BF8 MOV EDI,EAX
0055EAFA |. 3BE9 CMP EBP,ECX
0055EAFC |. 73 24 JNB SHORT elementc.0055EB22
0055EAFE |. 8BDD MOV EBX,EBP
0055EB00 |> 53 /PUSH EBX
0055EB01 |. 8BCF |MOV ECX,EDI
0055EB03 |. E8 687B0000 |CALL elementc.00566670
0055EB08 |. 8B86 30060000 |MOV EAX,DWORD PTR DS:[ESI+630]
0055EB0E |. 81C3 84000000 |ADD EBX,84
0055EB14 |. 81C7 84000000 |ADD EDI,84
0055EB1A |. 3BD8 |CMP EBX,EAX
0055EB1C |.^72 E2 \JB SHORT elementc.0055EB00
0055EB1E |. 8B4424 10 MOV EAX,DWORD PTR SS:[ESP+10]
0055EB22 |> 3BBE 30060000 CMP EDI,DWORD PTR DS:[ESI+630]
0055EB28 |. 73 1D JNB SHORT elementc.0055EB47
0055EB2A |> 8B07 /MOV EAX,DWORD PTR DS:[EDI]
0055EB2C |. 6A 00 |PUSH 0
0055EB2E |. 8BCF |MOV ECX,EDI
0055EB30 |. FF50 08 |CALL DWORD PTR DS:[EAX+8]
0055EB33 |. 8B86 30060000 |MOV EAX,DWORD PTR DS:[ESI+630]
0055EB39 |. 81C7 84000000 |ADD EDI,84
0055EB3F |. 3BF8 |CMP EDI,EAX
0055EB41 |.^72 E7 \JB SHORT elementc.0055EB2A
0055EB43 |. 8B4424 10 MOV EAX,DWORD PTR SS:[ESP+10]
0055EB47 |> 2BE8 SUB EBP,EAX
0055EB49 |. B8 E1830F3E MOV EAX,3E0F83E1
0055EB4E |. F7ED IMUL EBP
0055EB50 |. C1FA 05 SAR EDX,5
0055EB53 |. 8BCA MOV ECX,EDX
0055EB55 |. C1E9 1F SHR ECX,1F
0055EB58 |. 03D1 ADD EDX,ECX
0055EB5A |. 8B8E 30060000 MOV ECX,DWORD PTR DS:[ESI+630]
0055EB60 |. 8BC2 MOV EAX,EDX
0055EB62 |. F7D8 NEG EAX
0055EB64 |. C1E0 05 SHL EAX,5
0055EB67 |. 2BC2 SUB EAX,EDX
0055EB69 |. C1E0 02 SHL EAX,2
0055EB6C |. 03C8 ADD ECX,EAX
0055EB6E |. 8B86 38060000 MOV EAX,DWORD PTR DS:[ESI+638]
0055EB74 |. 2BC2 SUB EAX,EDX
0055EB76 |. 898E 30060000 MOV DWORD PTR DS:[ESI+630],ECX
0055EB7C |. 8986 38060000 MOV DWORD PTR DS:[ESI+638],EAX
0055EB82 |> 8B86 2C060000 MOV EAX,DWORD PTR DS:[ESI+62C]
0055EB88 |. 85C0 TEST EAX,EAX
0055EB8A |. 74 09 JE SHORT elementc.0055EB95
0055EB8C |. 50 PUSH EAX

Help Here this is for PHmod

[jnel26]

THose thing will make u ban for 1 day

[BetaBowElfe]

yes, avoid touching the client if u don't want a ban. I heard they increase the punishment maybe 1week? 1month? Use cheatengine only if u don't know how to use it then too bad. :P

[GODDNESS]

Now that modifing the client is detectable, this is pretty pointless! You can already do all of this with cheat engine anyways, i dont know how to do zoom hack is all (Not that it's much use to me anyways)!

[BetaBowElfe]

yep, too bad for those don't how to use it, bad too for the leechers. Actually this is a good sort of like stress on the enviroment which is good for their evoluntionary process. Now the leecher is forced to learn themselves to hack, or have no hacks at all. Given time noob leechers can learn and do it themselves. Much like me lol.